Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/L3dA8Nxjm7k7jyUkor7Pgs5hzt4.roa
File:                     L3dA8Nxjm7k7jyUkor7Pgs5hzt4.roa (raw, json)
Hash identifier:          r0a7oziEUQ+fF7SToq3Eu2YE7sx40NmnlVAq1DT3LVc=
Subject key identifier:   2F:77:40:F0:DC:63:9B:B9:3B:8F:25:24:A2:BE:CF:82:CE:61:CE:DE
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0A89
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/L3dA8Nxjm7k7jyUkor7Pgs5hzt4.roa
Signing time:             Sun 30 Jun 2024 01:52:35 +0000
ROA not before:           Sun 30 Jun 2024 01:52:35 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     9605
IP address blocks:        49.105.160.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2697 (0xa89)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun 30 01:52:35 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=2F7740F0DC639BB93B8F2524A2BECF82CE61CEDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:5c:01:88:8e:2e:14:2c:a1:56:bf:72:e5:c6:
                    11:03:b7:39:72:ff:cb:63:22:71:14:79:f8:e6:4b:
                    d9:7b:c6:56:a0:c4:dd:aa:b5:87:61:36:5c:e3:11:
                    ed:df:cb:f1:44:0d:4d:33:e5:0e:f2:b5:10:d2:af:
                    7f:95:40:df:46:50:97:7f:41:37:a2:a3:85:d8:77:
                    fe:e7:f2:ac:1b:fe:bd:04:dd:fc:c2:f4:b6:18:a3:
                    8e:cb:78:e1:ce:4f:03:59:8a:b8:73:f5:7c:d0:18:
                    bb:dd:cd:b2:18:b2:06:73:95:2f:1b:08:11:58:7a:
                    f3:31:11:ab:78:51:86:f2:36:2f:90:aa:6e:5f:e8:
                    5b:16:c0:76:02:50:92:1c:5e:0f:a8:6d:bc:8c:5e:
                    0a:a1:21:de:42:f9:ce:57:b0:23:f4:a2:b5:55:26:
                    97:05:fe:59:4f:bf:e9:b4:22:13:52:1f:72:88:b1:
                    f6:f0:33:1a:e4:9b:c6:71:30:da:09:77:bc:0e:f0:
                    e4:1d:54:b3:c3:cd:27:0d:86:72:43:d8:34:f3:27:
                    c3:0a:53:80:bc:68:5f:7e:a5:17:1e:f8:7a:58:fa:
                    72:b5:7e:b2:20:fa:05:e4:fb:06:a0:95:17:a5:e5:
                    63:8d:d3:35:09:bc:ba:04:15:5e:0a:8b:ad:4e:a8:
                    c9:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:77:40:F0:DC:63:9B:B9:3B:8F:25:24:A2:BE:CF:82:CE:61:CE:DE
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/L3dA8Nxjm7k7jyUkor7Pgs5hzt4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.105.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         43:6d:25:32:6e:45:f5:71:1e:14:e9:e1:9b:0b:44:19:47:46:
         93:5b:59:02:5d:9b:b5:90:cb:15:20:22:9d:f2:3e:d4:ed:fa:
         9b:6d:34:80:10:57:54:ad:5a:d9:a9:a7:10:fd:f3:cf:6f:18:
         ca:f8:67:db:41:fe:fd:79:f1:52:d4:c8:2f:00:f9:c2:29:70:
         0c:94:bf:63:0e:e4:5d:0a:1a:d4:ad:ac:c4:23:e2:25:c2:6f:
         76:a2:c5:21:c6:e0:1c:b5:c9:09:2f:92:13:5b:8b:8e:0c:82:
         b6:22:76:99:00:5b:e5:7d:b2:89:50:19:7e:fc:1f:26:5b:8c:
         cf:a4:ab:53:d6:5d:77:d9:ad:fe:9f:13:95:a1:75:6e:f7:03:
         62:57:f5:9f:68:ba:30:8d:39:1a:4b:5e:26:a2:5d:44:ae:4d:
         d6:8b:aa:30:ac:35:8c:97:00:6f:38:59:bd:10:d8:b3:55:78:
         22:3e:81:be:e4:42:a1:38:ef:65:a6:c6:5c:7f:cf:fc:75:a6:
         24:f8:3d:23:7c:45:72:bc:05:32:40:70:4d:f9:59:7f:db:5a:
         0b:cb:3d:75:4d:41:d5:0a:18:22:d7:e1:41:af:41:2c:ad:0a:
         d5:14:75:d6:23:5b:cd:47:5d:07:27:cc:41:64:4d:cb:d5:d0:
         e6:04:2e:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:24:00 2024 by rpki-client on console-fra.rpki-client.org